Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          Y3BoxUq/w5ovYjOBq+YPxRUZMdfCh0A7i49nZUn7AnM=
Subject key identifier:   B4:A1:78:D6:1B:7A:29:59:26:E9:E4:4B:A8:26:7B:E5:53:E4:DF:7C
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       207B7C8349FD7C6681C909498B778E74F5F9C9B4
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:27 +0000
ROA not before:           Fri 12 Sep 2025 15:31:27 +0000
ROA not after:            Fri 11 Sep 2026 15:36:27 +0000
asID:                     265461
IP address blocks:        2804:347c:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 23:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7b:7c:83:49:fd:7c:66:81:c9:09:49:8b:77:8e:74:f5:f9:c9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:27 2025 GMT
            Not After : Sep 11 15:36:27 2026 GMT
        Subject: CN=B4A178D61B7A295926E9E44BA8267BE553E4DF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:7a:b8:a5:b9:74:4d:6c:5c:9b:e2:55:22:
                    34:fd:15:03:03:33:b3:6d:94:e8:33:8d:fa:98:cc:
                    27:c9:44:a9:ce:d3:a7:2c:80:06:95:1c:24:10:23:
                    e0:5a:d0:57:89:5e:89:24:4d:85:38:a5:19:c5:0a:
                    05:ef:a4:41:b2:f3:c4:0f:fb:be:d1:08:34:ae:63:
                    75:22:8b:ee:77:23:e9:d4:08:05:9f:2e:35:71:99:
                    72:a4:46:a9:d9:33:73:8c:fc:86:80:63:bf:05:16:
                    b8:37:4e:f8:75:2a:1e:2f:7b:e9:7a:aa:02:00:f0:
                    18:23:d1:e6:da:79:82:07:25:c2:8b:5c:89:48:87:
                    b6:19:42:4a:de:81:0c:72:ce:5b:55:db:d2:ad:a4:
                    6a:94:0d:53:f4:a2:b5:86:09:b6:c7:51:18:78:c4:
                    47:3b:24:f5:43:76:b4:32:d3:e1:ca:b9:59:45:9d:
                    c6:7c:84:b6:c3:74:ae:8f:25:e5:2a:db:f0:17:7a:
                    41:38:6c:5f:ed:ae:50:b1:b7:95:71:e9:69:9b:4d:
                    33:66:7a:9f:0e:a9:c7:75:a9:fa:52:96:2c:37:18:
                    48:0a:df:b4:d4:e8:69:30:bd:83:95:57:2b:5b:42:
                    a8:8b:4c:99:1a:b6:3e:6d:66:c7:a8:c1:81:14:6a:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:78:D6:1B:7A:29:59:26:E9:E4:4B:A8:26:7B:E5:53:E4:DF:7C
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:85:6f:96:12:d6:22:5e:50:a5:b4:f4:28:d7:6e:06:6c:a0:
         d5:c8:ef:8b:bd:6c:5b:a0:da:58:f2:6f:98:58:3a:5e:a0:e0:
         e9:24:f2:82:30:e8:11:33:db:e0:50:a2:a5:8d:0b:9d:6d:d0:
         a5:52:50:6c:eb:5e:e7:d0:f4:ed:2c:d1:d2:3a:08:a8:41:a0:
         56:4e:63:26:d3:7f:fd:19:75:73:58:05:3f:c0:2c:3e:44:14:
         ed:13:7d:02:3c:95:9b:67:37:35:cb:b8:31:a9:ee:73:0b:35:
         09:90:c1:5e:7c:99:a8:58:fe:59:e2:f8:c3:83:78:cf:73:17:
         ac:56:4e:12:c8:27:c1:5c:98:ec:77:c9:0c:71:9e:37:1b:e5:
         cb:b4:7a:59:14:76:98:41:ee:04:a5:9e:58:4f:77:d7:4f:2d:
         40:bb:a9:d6:9c:4c:90:f7:d8:e8:ae:91:eb:c7:d9:a8:f5:25:
         ab:6b:77:79:af:d0:c2:1f:bb:47:15:1a:af:2f:bb:d2:1c:78:
         b0:fa:99:16:be:b5:e1:f1:80:76:14:b0:3c:c7:e1:e0:44:9a:
         0c:64:01:65:5d:9b:1a:50:d8:53:73:0e:cd:2b:01:4d:6e:64:
         02:4f:19:5d:89:01:75:ae:83:b4:b0:3e:91:c9:70:e2:e6:21:
         20:42:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:20:04 2025 by rpki-client